diff --git a/.github/workflows/k8s-deploy.yml b/.github/workflows/k8s-deploy.yml
index 5390516..a698aea 100644
--- a/.github/workflows/k8s-deploy.yml
+++ b/.github/workflows/k8s-deploy.yml
@@ -50,19 +50,6 @@ jobs:
           ) | tee -a /tmp/kube.log
         fi
 
-    - name: 'Apply manifests: namespaced resources'
-      run: |
-        (
-          find . \
-            -maxdepth 1 \
-            -type d \
-            -not -name '_' \
-            -not -name '.*' \
-            -print0 \
-          | sort -z \
-          | xargs -r0 -n 1 kubectl apply -Rf
-        ) | tee -a /tmp/kube.log
-
     - name: 'Apply manifests: generated regcred secrets'
       run: |
 
@@ -81,6 +68,19 @@ jobs:
         EOF
         done <<< "$(find . -maxdepth 1 -type d -not -name '_' -not -name '.*')"
 
+    - name: 'Apply manifests: namespaced resources'
+      run: |
+        (
+          find . \
+            -maxdepth 1 \
+            -type d \
+            -not -name '_' \
+            -not -name '.*' \
+            -print0 \
+          | sort -z \
+          | xargs -r0 -n 1 kubectl apply -Rf
+        ) | tee -a /tmp/kube.log
+
     - name: 'Apply manifests: deleted resources'
       run: |
         for manifest_path in $(git diff-tree --name-only --diff-filter=D -r HEAD^ HEAD); do
diff --git a/_/ClusterRole/squadquest-supabase-reader.yaml b/_/ClusterRole/squadquest-supabase-reader.yaml
new file mode 100644
index 0000000..707970f
--- /dev/null
+++ b/_/ClusterRole/squadquest-supabase-reader.yaml
@@ -0,0 +1,22 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: squadquest-supabase-reader
+rules:
+  - apiGroups:
+      - ''
+    resources:
+      - nodes
+      - namespaces
+      - pods
+    verbs:
+      - list
+      - watch
+  - apiGroups:
+      - ''
+    resourceNames:
+      - squadquest-supabase-*
+    resources:
+      - pods/log
+    verbs:
+      - get
diff --git a/_/ClusterRoleBinding/squadquest-supabase-view.yaml b/_/ClusterRoleBinding/squadquest-supabase-view.yaml
new file mode 100644
index 0000000..131a388
--- /dev/null
+++ b/_/ClusterRoleBinding/squadquest-supabase-view.yaml
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: squadquest-supabase-view
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: squadquest-supabase-reader
+subjects:
+  - kind: ServiceAccount
+    name: squadquest-supabase-supabase-vector
+    namespace: squadquest-supabase
diff --git a/_/Namespace/squadquest-supabase.yaml b/_/Namespace/squadquest-supabase.yaml
new file mode 100644
index 0000000..1684a4d
--- /dev/null
+++ b/_/Namespace/squadquest-supabase.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: squadquest-supabase
diff --git a/choose-native-plants/Deployment/choose-native-plants.yaml b/choose-native-plants/Deployment/choose-native-plants.yaml
index c2ea2e9..31e7e47 100644
--- a/choose-native-plants/Deployment/choose-native-plants.yaml
+++ b/choose-native-plants/Deployment/choose-native-plants.yaml
@@ -37,6 +37,9 @@ spec:
                   key: password
                   name: mongo
                   optional: false
+          envFrom:
+            - secretRef:
+                name: pac-api
           image: 'mongo:5.0.6'
           imagePullPolicy: IfNotPresent
           name: choose-native-plants-db
diff --git a/squadquest-supabase/ConfigMap/squadquest-supabase-supabase-db-initdb.yaml b/squadquest-supabase/ConfigMap/squadquest-supabase-supabase-db-initdb.yaml
new file mode 100644
index 0000000..597ffb7
--- /dev/null
+++ b/squadquest-supabase/ConfigMap/squadquest-supabase-supabase-db-initdb.yaml
@@ -0,0 +1,245 @@
+apiVersion: v1
+data:
+  98-webhooks.sql: |
+    BEGIN;
+      -- Create pg_net extension
+      CREATE EXTENSION IF NOT EXISTS pg_net SCHEMA extensions;
+      -- Create supabase_functions schema
+      CREATE SCHEMA supabase_functions AUTHORIZATION supabase_admin;
+      GRANT USAGE ON SCHEMA supabase_functions TO postgres, anon, authenticated, service_role;
+      ALTER DEFAULT PRIVILEGES IN SCHEMA supabase_functions GRANT ALL ON TABLES TO postgres, anon, authenticated, service_role;
+      ALTER DEFAULT PRIVILEGES IN SCHEMA supabase_functions GRANT ALL ON FUNCTIONS TO postgres, anon, authenticated, service_role;
+      ALTER DEFAULT PRIVILEGES IN SCHEMA supabase_functions GRANT ALL ON SEQUENCES TO postgres, anon, authenticated, service_role;
+      -- supabase_functions.migrations definition
+      CREATE TABLE supabase_functions.migrations (
+        version text PRIMARY KEY,
+        inserted_at timestamptz NOT NULL DEFAULT NOW()
+      );
+      -- Initial supabase_functions migration
+      INSERT INTO supabase_functions.migrations (version) VALUES ('initial');
+      -- supabase_functions.hooks definition
+      CREATE TABLE supabase_functions.hooks (
+        id bigserial PRIMARY KEY,
+        hook_table_id integer NOT NULL,
+        hook_name text NOT NULL,
+        created_at timestamptz NOT NULL DEFAULT NOW(),
+        request_id bigint
+      );
+      CREATE INDEX supabase_functions_hooks_request_id_idx ON supabase_functions.hooks USING btree (request_id);
+      CREATE INDEX supabase_functions_hooks_h_table_id_h_name_idx ON supabase_functions.hooks USING btree (hook_table_id, hook_name);
+      COMMENT ON TABLE supabase_functions.hooks IS 'Supabase Functions Hooks: Audit trail for triggered hooks.';
+      CREATE FUNCTION supabase_functions.http_request()
+        RETURNS trigger
+        LANGUAGE plpgsql
+        AS $function$
+        DECLARE
+          request_id bigint;
+          payload jsonb;
+          url text := TG_ARGV[0]::text;
+          method text := TG_ARGV[1]::text;
+          headers jsonb DEFAULT '{}'::jsonb;
+          params jsonb DEFAULT '{}'::jsonb;
+          timeout_ms integer DEFAULT 1000;
+        BEGIN
+          IF url IS NULL OR url = 'null' THEN
+            RAISE EXCEPTION 'url argument is missing';
+          END IF;
+
+          IF method IS NULL OR method = 'null' THEN
+            RAISE EXCEPTION 'method argument is missing';
+          END IF;
+
+          IF TG_ARGV[2] IS NULL OR TG_ARGV[2] = 'null' THEN
+            headers = '{"Content-Type": "application/json"}'::jsonb;
+          ELSE
+            headers = TG_ARGV[2]::jsonb;
+          END IF;
+
+          IF TG_ARGV[3] IS NULL OR TG_ARGV[3] = 'null' THEN
+            params = '{}'::jsonb;
+          ELSE
+            params = TG_ARGV[3]::jsonb;
+          END IF;
+
+          IF TG_ARGV[4] IS NULL OR TG_ARGV[4] = 'null' THEN
+            timeout_ms = 1000;
+          ELSE
+            timeout_ms = TG_ARGV[4]::integer;
+          END IF;
+
+          CASE
+            WHEN method = 'GET' THEN
+              SELECT http_get INTO request_id FROM net.http_get(
+                url,
+                params,
+                headers,
+                timeout_ms
+              );
+            WHEN method = 'POST' THEN
+              payload = jsonb_build_object(
+                'old_record', OLD,
+                'record', NEW,
+                'type', TG_OP,
+                'table', TG_TABLE_NAME,
+                'schema', TG_TABLE_SCHEMA
+              );
+
+              SELECT http_post INTO request_id FROM net.http_post(
+                url,
+                payload,
+                params,
+                headers,
+                timeout_ms
+              );
+            ELSE
+              RAISE EXCEPTION 'method argument % is invalid', method;
+          END CASE;
+
+          INSERT INTO supabase_functions.hooks
+            (hook_table_id, hook_name, request_id)
+          VALUES
+            (TG_RELID, TG_NAME, request_id);
+
+          RETURN NEW;
+        END
+      $function$;
+      -- Supabase super admin
+      DO
+      $$
+      BEGIN
+        IF NOT EXISTS (
+          SELECT 1
+          FROM pg_roles
+          WHERE rolname = 'supabase_functions_admin'
+        )
+        THEN
+          CREATE USER supabase_functions_admin NOINHERIT CREATEROLE LOGIN NOREPLICATION;
+        END IF;
+      END
+      $$;
+      GRANT ALL PRIVILEGES ON SCHEMA supabase_functions TO supabase_functions_admin;
+      GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA supabase_functions TO supabase_functions_admin;
+      GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA supabase_functions TO supabase_functions_admin;
+      ALTER USER supabase_functions_admin SET search_path = "supabase_functions";
+      ALTER table "supabase_functions".migrations OWNER TO supabase_functions_admin;
+      ALTER table "supabase_functions".hooks OWNER TO supabase_functions_admin;
+      ALTER function "supabase_functions".http_request() OWNER TO supabase_functions_admin;
+      GRANT supabase_functions_admin TO postgres;
+      -- Remove unused supabase_pg_net_admin role
+      DO
+      $$
+      BEGIN
+        IF EXISTS (
+          SELECT 1
+          FROM pg_roles
+          WHERE rolname = 'supabase_pg_net_admin'
+        )
+        THEN
+          REASSIGN OWNED BY supabase_pg_net_admin TO supabase_admin;
+          DROP OWNED BY supabase_pg_net_admin;
+          DROP ROLE supabase_pg_net_admin;
+        END IF;
+      END
+      $$;
+      -- pg_net grants when extension is already enabled
+      DO
+      $$
+      BEGIN
+        IF EXISTS (
+          SELECT 1
+          FROM pg_extension
+          WHERE extname = 'pg_net'
+        )
+        THEN
+          GRANT USAGE ON SCHEMA net TO supabase_functions_admin, postgres, anon, authenticated, service_role;
+          ALTER function net.http_get(url text, params jsonb, headers jsonb, timeout_milliseconds integer) SECURITY DEFINER;
+          ALTER function net.http_post(url text, body jsonb, params jsonb, headers jsonb, timeout_milliseconds integer) SECURITY DEFINER;
+          ALTER function net.http_get(url text, params jsonb, headers jsonb, timeout_milliseconds integer) SET search_path = net;
+          ALTER function net.http_post(url text, body jsonb, params jsonb, headers jsonb, timeout_milliseconds integer) SET search_path = net;
+          REVOKE ALL ON FUNCTION net.http_get(url text, params jsonb, headers jsonb, timeout_milliseconds integer) FROM PUBLIC;
+          REVOKE ALL ON FUNCTION net.http_post(url text, body jsonb, params jsonb, headers jsonb, timeout_milliseconds integer) FROM PUBLIC;
+          GRANT EXECUTE ON FUNCTION net.http_get(url text, params jsonb, headers jsonb, timeout_milliseconds integer) TO supabase_functions_admin, postgres, anon, authenticated, service_role;
+          GRANT EXECUTE ON FUNCTION net.http_post(url text, body jsonb, params jsonb, headers jsonb, timeout_milliseconds integer) TO supabase_functions_admin, postgres, anon, authenticated, service_role;
+        END IF;
+      END
+      $$;
+      -- Event trigger for pg_net
+      CREATE OR REPLACE FUNCTION extensions.grant_pg_net_access()
+      RETURNS event_trigger
+      LANGUAGE plpgsql
+      AS $$
+      BEGIN
+        IF EXISTS (
+          SELECT 1
+          FROM pg_event_trigger_ddl_commands() AS ev
+          JOIN pg_extension AS ext
+          ON ev.objid = ext.oid
+          WHERE ext.extname = 'pg_net'
+        )
+        THEN
+          GRANT USAGE ON SCHEMA net TO supabase_functions_admin, postgres, anon, authenticated, service_role;
+          ALTER function net.http_get(url text, params jsonb, headers jsonb, timeout_milliseconds integer) SECURITY DEFINER;
+          ALTER function net.http_post(url text, body jsonb, params jsonb, headers jsonb, timeout_milliseconds integer) SECURITY DEFINER;
+          ALTER function net.http_get(url text, params jsonb, headers jsonb, timeout_milliseconds integer) SET search_path = net;
+          ALTER function net.http_post(url text, body jsonb, params jsonb, headers jsonb, timeout_milliseconds integer) SET search_path = net;
+          REVOKE ALL ON FUNCTION net.http_get(url text, params jsonb, headers jsonb, timeout_milliseconds integer) FROM PUBLIC;
+          REVOKE ALL ON FUNCTION net.http_post(url text, body jsonb, params jsonb, headers jsonb, timeout_milliseconds integer) FROM PUBLIC;
+          GRANT EXECUTE ON FUNCTION net.http_get(url text, params jsonb, headers jsonb, timeout_milliseconds integer) TO supabase_functions_admin, postgres, anon, authenticated, service_role;
+          GRANT EXECUTE ON FUNCTION net.http_post(url text, body jsonb, params jsonb, headers jsonb, timeout_milliseconds integer) TO supabase_functions_admin, postgres, anon, authenticated, service_role;
+        END IF;
+      END;
+      $$;
+      COMMENT ON FUNCTION extensions.grant_pg_net_access IS 'Grants access to pg_net';
+      DO
+      $$
+      BEGIN
+        IF NOT EXISTS (
+          SELECT 1
+          FROM pg_event_trigger
+          WHERE evtname = 'issue_pg_net_access'
+        ) THEN
+          CREATE EVENT TRIGGER issue_pg_net_access ON ddl_command_end WHEN TAG IN ('CREATE EXTENSION')
+          EXECUTE PROCEDURE extensions.grant_pg_net_access();
+        END IF;
+      END
+      $$;
+      INSERT INTO supabase_functions.migrations (version) VALUES ('20210809183423_update_grants');
+      ALTER function supabase_functions.http_request() SECURITY DEFINER;
+      ALTER function supabase_functions.http_request() SET search_path = supabase_functions;
+      REVOKE ALL ON FUNCTION supabase_functions.http_request() FROM PUBLIC;
+      GRANT EXECUTE ON FUNCTION supabase_functions.http_request() TO postgres, anon, authenticated, service_role;
+    COMMIT;
+  99-jwt.sql: |
+    \set jwt_secret `echo "$JWT_SECRET"`
+    \set jwt_exp `echo "$JWT_EXP"`
+
+    ALTER DATABASE postgres SET "app.settings.jwt_secret" TO :jwt_secret;
+    ALTER DATABASE postgres SET "app.settings.jwt_exp" TO :jwt_exp;
+  99-logs.sql: |
+    \set pguser `echo "$POSTGRES_USER"`
+
+    create schema if not exists _analytics;
+    alter schema _analytics owner to :pguser;
+  99-realtime.sql: |
+    \set pguser `echo "$POSTGRES_USER"`
+
+    create schema if not exists _realtime;
+    alter schema _realtime owner to :pguser;
+  99-roles.sql: |
+    -- NOTE: change to your own passwords for production environments
+    \set pgpass `echo "$POSTGRES_PASSWORD"`
+
+    ALTER USER authenticator WITH PASSWORD :'pgpass';
+    ALTER USER pgbouncer WITH PASSWORD :'pgpass';
+    ALTER USER supabase_auth_admin WITH PASSWORD :'pgpass';
+    ALTER USER supabase_functions_admin WITH PASSWORD :'pgpass';
+    ALTER USER supabase_storage_admin WITH PASSWORD :'pgpass';
+kind: ConfigMap
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-db-initdb
+  namespace: squadquest-supabase
diff --git a/squadquest-supabase/ConfigMap/squadquest-supabase-supabase-db-migrations.yaml b/squadquest-supabase/ConfigMap/squadquest-supabase-supabase-db-migrations.yaml
new file mode 100644
index 0000000..ce1f862
--- /dev/null
+++ b/squadquest-supabase/ConfigMap/squadquest-supabase-supabase-db-migrations.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+data: {}
+kind: ConfigMap
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-db-migrations
+  namespace: squadquest-supabase
diff --git a/squadquest-supabase/ConfigMap/squadquest-supabase-supabase-functions-main.yaml b/squadquest-supabase/ConfigMap/squadquest-supabase-supabase-functions-main.yaml
new file mode 100644
index 0000000..8b6b3d5
--- /dev/null
+++ b/squadquest-supabase/ConfigMap/squadquest-supabase-supabase-functions-main.yaml
@@ -0,0 +1,106 @@
+apiVersion: v1
+data:
+  index.ts: |
+    import { serve } from 'https://deno.land/std@0.131.0/http/server.ts'
+    import * as jose from 'https://deno.land/x/jose@v4.14.4/index.ts'
+
+    console.log('main function started')
+
+    const JWT_SECRET = Deno.env.get('JWT_SECRET')
+    const VERIFY_JWT = Deno.env.get('VERIFY_JWT') === 'true'
+
+    function getAuthToken(req: Request) {
+      const authHeader = req.headers.get('authorization')
+      if (!authHeader) {
+        throw new Error('Missing authorization header')
+      }
+      const [bearer, token] = authHeader.split(' ')
+      if (bearer !== 'Bearer') {
+        throw new Error(`Auth header is not 'Bearer {token}'`)
+      }
+      return token
+    }
+
+    async function verifyJWT(jwt: string): Promise<boolean> {
+      const encoder = new TextEncoder()
+      const secretKey = encoder.encode(JWT_SECRET)
+      try {
+        await jose.jwtVerify(jwt, secretKey)
+      } catch (err) {
+        console.error(err)
+        return false
+      }
+      return true
+    }
+
+    serve(async (req: Request) => {
+      if (req.method !== 'OPTIONS' && VERIFY_JWT) {
+        try {
+          const token = getAuthToken(req)
+          const isValidJWT = await verifyJWT(token)
+
+          if (!isValidJWT) {
+            return new Response(JSON.stringify({ msg: 'Invalid JWT' }), {
+              status: 401,
+              headers: { 'Content-Type': 'application/json' },
+            })
+          }
+        } catch (e) {
+          console.error(e)
+          return new Response(JSON.stringify({ msg: e.toString() }), {
+            status: 401,
+            headers: { 'Content-Type': 'application/json' },
+          })
+        }
+      }
+
+      const url = new URL(req.url)
+      const { pathname } = url
+      const path_parts = pathname.split('/')
+      const service_name = path_parts[1]
+
+      if (!service_name || service_name === '') {
+        const error = { msg: 'missing function name in request' }
+        return new Response(JSON.stringify(error), {
+          status: 400,
+          headers: { 'Content-Type': 'application/json' },
+        })
+      }
+
+      const servicePath = `/home/deno/functions/${service_name}`
+      console.error(`serving the request with ${servicePath}`)
+
+      const memoryLimitMb = 150
+      const workerTimeoutMs = 1 * 60 * 1000
+      const noModuleCache = false
+      const importMapPath = null
+      const envVarsObj = Deno.env.toObject()
+      const envVars = Object.keys(envVarsObj).map((k) => [k, envVarsObj[k]])
+
+      try {
+        const worker = await EdgeRuntime.userWorkers.create({
+          servicePath,
+          memoryLimitMb,
+          workerTimeoutMs,
+          noModuleCache,
+          importMapPath,
+          envVars,
+        })
+        return await worker.fetch(req)
+      } catch (e) {
+        const error = { msg: e.toString() }
+        return new Response(JSON.stringify(error), {
+          status: 500,
+          headers: { 'Content-Type': 'application/json' },
+        })
+      }
+    })
+kind: ConfigMap
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-functions-main
+  namespace: squadquest-supabase
diff --git a/squadquest-supabase/ConfigMap/squadquest-supabase-supabase-kong.yaml b/squadquest-supabase/ConfigMap/squadquest-supabase-supabase-kong.yaml
new file mode 100644
index 0000000..7d29ca0
--- /dev/null
+++ b/squadquest-supabase/ConfigMap/squadquest-supabase-supabase-kong.yaml
@@ -0,0 +1,215 @@
+apiVersion: v1
+data:
+  template.yml: |
+    _format_version: '2.1'
+    _transform: true
+
+    consumers:
+      - username: DASHBOARD
+      - username: anon
+        keyauth_credentials:
+            - key: ${SUPABASE_ANON_KEY}
+      - username: service_role
+        keyauth_credentials:
+            - key: ${SUPABASE_SERVICE_KEY}
+    acls:
+      - consumer: anon
+        group: anon
+      - consumer: service_role
+        group: admin
+    basicauth_credentials:
+      - consumer: DASHBOARD
+        username: ${DASHBOARD_USERNAME}
+        password: ${DASHBOARD_PASSWORD}
+    services:
+      - name: auth-v1-open
+        url: http://squadquest-supabase-supabase-auth:9999/verify
+        routes:
+          - name: auth-v1-open
+            strip_path: true
+            paths:
+              - /auth/v1/verify
+        plugins:
+          - name: cors
+      - name: auth-v1-open-callback
+        url: http://squadquest-supabase-supabase-auth:9999/callback
+        routes:
+          - name: auth-v1-open-callback
+            strip_path: true
+            paths:
+              - /auth/v1/callback
+        plugins:
+          - name: cors
+      - name: auth-v1-open-authorize
+        url: http://squadquest-supabase-supabase-auth:9999/authorize
+        routes:
+          - name: auth-v1-open-authorize
+            strip_path: true
+            paths:
+              - /auth/v1/authorize
+        plugins:
+          - name: cors
+      - name: auth-v1
+        _comment: "GoTrue: /auth/v1/* -> http://squadquest-supabase-supabase-auth:9999/*"
+        url: http://squadquest-supabase-supabase-auth:9999
+        routes:
+          - name: auth-v1-all
+            strip_path: true
+            paths:
+              - /auth/v1/
+        plugins:
+          - name: cors
+          - name: key-auth
+            config:
+              hide_credentials: false
+          - name: acl
+            config:
+              hide_groups_header: true
+              allow:
+                - admin
+                - anon
+      - name: rest-v1
+        _comment: "PostgREST: /rest/v1/* -> http://squadquest-supabase-supabase-rest:3000/*"
+        url: http://squadquest-supabase-supabase-rest:3000/
+        routes:
+          - name: rest-v1-all
+            strip_path: true
+            paths:
+              - /rest/v1/
+        plugins:
+          - name: cors
+          - name: key-auth
+            config:
+              hide_credentials: true
+          - name: acl
+            config:
+              hide_groups_header: true
+              allow:
+                - admin
+                - anon
+      - name: graphql-v1
+        _comment: 'PostgREST: /graphql/v1/* -> http://squadquest-supabase-supabase-rest:3000/rpc/graphql'
+        url: http://squadquest-supabase-supabase-rest:3000/rpc/graphql
+        routes:
+          - name: graphql-v1-all
+            strip_path: true
+            paths:
+              - /graphql/v1
+        plugins:
+          - name: cors
+          - name: key-auth
+            config:
+              hide_credentials: true
+          - name: request-transformer
+            config:
+              add:
+                headers:
+                  - Content-Profile:graphql_public
+          - name: acl
+            config:
+              hide_groups_header: true
+              allow:
+                - admin
+                - anon
+      - name: realtime-v1
+        _comment: "Realtime: /realtime/v1/* -> ws://squadquest-supabase-supabase-realtime:4000/socket/*"
+        url: http://squadquest-supabase-supabase-realtime:4000/socket
+        routes:
+          - name: realtime-v1-all
+            strip_path: true
+            paths:
+              - /realtime/v1/
+        plugins:
+          - name: cors
+          - name: key-auth
+            config:
+              hide_credentials: false
+          - name: acl
+            config:
+              hide_groups_header: true
+              allow:
+                - admin
+                - anon
+      - name: storage-v1
+        _comment: "Storage: /storage/v1/* -> http://squadquest-supabase-supabase-storage:5000/*"
+        url: http://squadquest-supabase-supabase-storage:5000/
+        routes:
+          - name: storage-v1-all
+            strip_path: true
+            paths:
+              - /storage/v1/
+        plugins:
+          - name: cors
+      - name: functions-v1
+        _comment: 'Edge Functions: /functions/v1/* -> http://squadquest-supabase-supabase-functions:9000/*'
+        url: http://functions:9000/
+        routes:
+          - name: functions-v1-all
+            strip_path: true
+            paths:
+              - /functions/v1/
+        plugins:
+          - name: cors
+      - name: analytics-v1
+        _comment: 'Analytics: /analytics/v1/* -> http://squadquest-supabase-supabase-analytics:4000/*'
+        url: http://squadquest-supabase-supabase-analytics:4000/
+        routes:
+          - name: analytics-v1-all
+            strip_path: true
+            paths:
+              - /analytics/v1/
+      - name: meta
+        _comment: "pg-meta: /pg/* -> http://squadquest-supabase-supabase-meta:8080/*"
+        url: http://squadquest-supabase-supabase-meta:8080/
+        routes:
+          - name: meta-all
+            strip_path: true
+            paths:
+              - /pg/
+        plugins:
+          - name: key-auth
+            config:
+              hide_credentials: false
+          - name: acl
+            config:
+              hide_groups_header: true
+              allow:
+                - admin
+      - name: dashboard
+        _comment: 'Studio: /* -> http://squadquest-supabase-supabase-studio:3000/*'
+        url: http://squadquest-supabase-supabase-studio:3000/
+        routes:
+          - name: dashboard-all
+            strip_path: true
+            paths:
+              - /
+        plugins:
+          - name: cors
+          - name: basic-auth
+            config:
+              hide_credentials: true
+  wrapper.sh: |
+    #!/bin/bash
+
+    set -euo pipefail
+
+    echo "Replacing env placeholders of /usr/local/kong/kong.yml"
+
+    sed \
+    -e "s/\${SUPABASE_ANON_KEY}/${SUPABASE_ANON_KEY}/" \
+    -e "s/\${SUPABASE_SERVICE_KEY}/${SUPABASE_SERVICE_KEY}/" \
+    -e "s/\${DASHBOARD_USERNAME}/${DASHBOARD_USERNAME}/" \
+    -e "s/\${DASHBOARD_PASSWORD}/${DASHBOARD_PASSWORD}/" \
+    /usr/local/kong/template.yml \
+    > /usr/local/kong/kong.yml
+
+    exec /docker-entrypoint.sh kong docker-start
+kind: ConfigMap
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-kong
+  namespace: squadquest-supabase
diff --git a/squadquest-supabase/ConfigMap/squadquest-supabase-supabase-vector-config.yaml b/squadquest-supabase/ConfigMap/squadquest-supabase-supabase-vector-config.yaml
new file mode 100644
index 0000000..8fbbb88
--- /dev/null
+++ b/squadquest-supabase/ConfigMap/squadquest-supabase-supabase-vector-config.yaml
@@ -0,0 +1,254 @@
+apiVersion: v1
+data:
+  secret.sh: |
+    #!/bin/sh
+    cat << EOF
+    {
+      "logflare_api_key": {
+        "value": "$LOGFLARE_API_KEY",
+        "error": null
+      }
+    }
+    EOF
+  vector.yml: |
+    secret:
+      credentials:
+        type: exec
+        command:
+          - /etc/vector/secret.sh
+
+    api:
+      enabled: true
+      address: 0.0.0.0:9001
+
+    sources:
+      kubernetes_host:
+        type: kubernetes_logs
+        extra_label_selector: app.kubernetes.io/instance=squadquest-supabase,app.kubernetes.io/name!=supabase-vector
+
+    transforms:
+      project_logs:
+        type: remap
+        inputs:
+          - kubernetes_host
+        source: |-
+          .project = "default"
+          .event_message = del(.message)
+          .appname = del(.kubernetes.container_name)
+          del(.file)
+          del(.kubernetes)
+          del(.source_type)
+          del(.stream)
+      router:
+        type: route
+        inputs:
+          - project_logs
+        route:
+          kong: '.appname == "supabase-kong"'
+          auth: '.appname == "supabase-auth"'
+          rest: '.appname == "supabase-rest"'
+          realtime: '.appname == "supabase-realtime"'
+          storage: '.appname == "supabase-storage"'
+          functions: '.appname == "supabase-functions"'
+          db: '.appname == "supabase-db"'
+      # Ignores non nginx errors since they are related with kong booting up
+      kong_logs:
+        type: remap
+        inputs:
+          - router.kong
+        source: |-
+          req, err = parse_nginx_log(.event_message, "combined")
+          if err == null {
+              .timestamp = req.timestamp
+              .metadata.request.headers.referer = req.referer
+              .metadata.request.headers.user_agent = req.agent
+              .metadata.request.headers.cf_connecting_ip = req.client
+              .metadata.request.method = req.method
+              .metadata.request.path = req.path
+              .metadata.request.protocol = req.protocol
+              .metadata.response.status_code = req.status
+          }
+          if err != null {
+            abort
+          }
+      # Ignores non nginx errors since they are related with kong booting up
+      kong_err:
+        type: remap
+        inputs:
+          - router.kong
+        source: |-
+          .metadata.request.method = "GET"
+          .metadata.response.status_code = 200
+          parsed, err = parse_nginx_log(.event_message, "error")
+          if err == null {
+              .timestamp = parsed.timestamp
+              .severity = parsed.severity
+              .metadata.request.host = parsed.host
+              .metadata.request.headers.cf_connecting_ip = parsed.client
+              url, err = split(parsed.request, " ")
+              if err == null {
+                  .metadata.request.method = url[0]
+                  .metadata.request.path = url[1]
+                  .metadata.request.protocol = url[2]
+              }
+          }
+          if err != null {
+            abort
+          }
+      # Gotrue logs are structured json strings which frontend parses directly. But we keep metadata for consistency.
+      auth_logs:
+        type: remap
+        inputs:
+          - router.auth
+        source: |-
+          parsed, err = parse_json(.event_message)
+          if err == null {
+              .metadata.timestamp = parsed.time
+              .metadata = merge!(.metadata, parsed)
+          }
+      # PostgREST logs are structured so we separate timestamp from message using regex
+      rest_logs:
+        type: remap
+        inputs:
+          - router.rest
+        source: |-
+          parsed, err = parse_regex(.event_message, r'^(?P<time>.*): (?P<msg>.*)$')
+          if err == null {
+              .event_message = parsed.msg
+              .timestamp = parse_timestamp!(parsed.time, format: "%e/%b/%Y %R %:z")
+              .metadata.host = .project
+          }
+      # Realtime logs are structured so we parse the severity level using regex (ignore time because it has no date)
+      realtime_logs:
+        type: remap
+        inputs:
+          - router.realtime
+        source: |-
+          .metadata.project = del(.project)
+          .metadata.external_id = .metadata.project
+          parsed, err = parse_regex(.event_message, r'^(?P<time>\d+:\d+:\d+\.\d+) \[(?P<level>\w+)\] (?P<msg>.*)$')
+          if err == null {
+              .event_message = parsed.msg
+              .metadata.level = parsed.level
+          }
+      # Storage logs may contain json objects so we parse them for completeness
+      storage_logs:
+        type: remap
+        inputs:
+          - router.storage
+        source: |-
+          .metadata.project = del(.project)
+          .metadata.tenantId = .metadata.project
+          parsed, err = parse_json(.event_message)
+          if err == null {
+              .event_message = parsed.msg
+              .metadata.level = parsed.level
+              .metadata.timestamp = parsed.time
+              .metadata.context[0].host = parsed.hostname
+              .metadata.context[0].pid = parsed.pid
+          }
+      # Postgres logs some messages to stderr which we map to warning severity level
+      db_logs:
+        type: remap
+        inputs:
+          - router.db
+        source: |-
+          .metadata.host = "db-default"
+          .metadata.parsed.timestamp = .timestamp
+          
+          parsed, err = parse_regex(.event_message, r'.*(?P<level>INFO|NOTICE|WARNING|ERROR|LOG|FATAL|PANIC?):.*', numeric_groups: true)
+
+          if err != null || parsed == null {
+            .metadata.parsed.error_severity = "info"
+          }
+          if parsed != null {
+          .metadata.parsed.error_severity = parsed.level
+          }
+          if .metadata.parsed.error_severity == "info" {
+              .metadata.parsed.error_severity = "log"
+          }
+          .metadata.parsed.error_severity = upcase!(.metadata.parsed.error_severity)
+    sinks:
+      logflare_auth:
+        type: 'http'
+        inputs:
+          - auth_logs
+        encoding:
+          codec: 'json'
+        method: 'post'
+        request:
+          retry_max_duration_secs: 10
+        uri: 'http://squadquest-supabase-supabase-analytics:4000/api/logs?source_name=gotrue.logs.prod&api_key=SECRET[credentials.logflare_api_key]'
+      logflare_realtime:
+        type: 'http'
+        inputs:
+          - realtime_logs
+        encoding:
+          codec: 'json'
+        method: 'post'
+        request:
+          retry_max_duration_secs: 10
+        uri: 'http://squadquest-supabase-supabase-analytics:4000/api/logs?source_name=realtime.logs.prod&api_key=SECRET[credentials.logflare_api_key]'
+      logflare_rest:
+        type: 'http'
+        inputs:
+          - rest_logs
+        encoding:
+          codec: 'json'
+        method: 'post'
+        request:
+          retry_max_duration_secs: 10
+        uri: 'http://squadquest-supabase-supabase-analytics:4000/api/logs?source_name=postgREST.logs.prod&api_key=SECRET[credentials.logflare_api_key]'
+      logflare_db:
+        type: 'http'
+        inputs:
+          - db_logs
+        encoding:
+          codec: 'json'
+        method: 'post'
+        request:
+          retry_max_duration_secs: 10
+        # We must route the sink through kong because ingesting logs before logflare is fully initialised will
+        # lead to broken queries from studio. This works by the assumption that containers are started in the
+        # following order: vector > db > logflare > kong
+        uri: 'http://squadquest-supabase-supabase-kong:8000/analytics/v1/api/logs?source_name=postgres.logs&api_key=SECRET[credentials.logflare_api_key]'
+      logflare_functions:
+        type: 'http'
+        inputs:
+          - router.functions
+        encoding:
+          codec: 'json'
+        method: 'post'
+        request:
+          retry_max_duration_secs: 10
+        uri: 'http://squadquest-supabase-supabase-analytics:4000/api/logs?source_name=deno-relay-logs&api_key=SECRET[credentials.logflare_api_key]'
+      logflare_storage:
+        type: 'http'
+        inputs:
+          - storage_logs
+        encoding:
+          codec: 'json'
+        method: 'post'
+        request:
+          retry_max_duration_secs: 10
+        uri: 'http://squadquest-supabase-supabase-analytics:4000/api/logs?source_name=storage.logs.prod.2&api_key=SECRET[credentials.logflare_api_key]'
+      logflare_kong:
+        type: 'http'
+        inputs:
+          - kong_logs
+          - kong_err
+        encoding:
+          codec: 'json'
+        method: 'post'
+        request:
+          retry_max_duration_secs: 10
+        uri: 'http://squadquest-supabase-supabase-analytics:4000/api/logs?source_name=cloudflare.logs.prod&api_key=SECRET[credentials.logflare_api_key]'
+kind: ConfigMap
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-vector-config
+  namespace: squadquest-supabase
diff --git a/squadquest-supabase/Deployment/squadquest-supabase-supabase-analytics.yaml b/squadquest-supabase/Deployment/squadquest-supabase-supabase-analytics.yaml
new file mode 100644
index 0000000..cd5e321
--- /dev/null
+++ b/squadquest-supabase/Deployment/squadquest-supabase-supabase-analytics.yaml
@@ -0,0 +1,101 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-analytics
+  namespace: squadquest-supabase
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: squadquest-supabase
+      app.kubernetes.io/name: supabase-analytics
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: squadquest-supabase
+        app.kubernetes.io/name: supabase-analytics
+    spec:
+      containers:
+        - env:
+            - name: DB_DRIVER
+              value: postgresql
+            - name: DB_PORT
+              value: '5432'
+            - name: DB_SCHEMA
+              value: _analytics
+            - name: DB_USERNAME
+              value: supabase_admin
+            - name: FEATURE_FLAG_OVERRIDE
+              value: multibackend=true
+            - name: LOGFLARE_NODE_HOST
+              value: 127.0.0.1
+            - name: LOGFLARE_SINGLE_TENANT
+              value: 'true'
+            - name: LOGFLARE_SUPABASE_MODE
+              value: 'true'
+            - name: DB_HOSTNAME
+              value: squadquest-supabase-supabase-db
+            - name: DB_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  key: password
+                  name: squadquest-supabase-db
+            - name: DB_PASSWORD_ENC
+              valueFrom:
+                secretKeyRef:
+                  key: password_encoded
+                  name: squadquest-supabase-db
+            - name: DB_DATABASE
+              valueFrom:
+                secretKeyRef:
+                  key: database
+                  name: squadquest-supabase-db
+            - name: LOGFLARE_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  key: apiKey
+                  name: squadquest-supabase-analytics
+            - name: POSTGRES_BACKEND_URL
+              value: >-
+                $(DB_DRIVER)://$(DB_USERNAME):$(DB_PASSWORD_ENC)@$(DB_HOSTNAME):$(DB_PORT)/$(DB_DATABASE)
+            - name: POSTGRES_BACKEND_SCHEMA
+              value: $(DB_SCHEMA)
+            - name: LOGFLARE_FEATURE_FLAG_OVERRIDE
+              value: $(FEATURE_FLAG_OVERRIDE)
+          image: 'supabase/logflare:1.10.0'
+          imagePullPolicy: IfNotPresent
+          name: supabase-analytics
+          ports:
+            - containerPort: 4000
+              protocol: TCP
+          securityContext: {}
+      initContainers:
+        - args:
+            - |
+              until pg_isready -h $(DB_HOST) -p $(DB_PORT) -U $(DB_USER); do
+              echo "Waiting for database to start..."
+              sleep 2
+              done
+            - echo "Database is ready"
+          command:
+            - /bin/sh
+            - '-c'
+          env:
+            - name: DB_HOST
+              value: squadquest-supabase-supabase-db
+            - name: DB_USER
+              valueFrom:
+                secretKeyRef:
+                  key: username
+                  name: squadquest-supabase-db
+            - name: DB_PORT
+              value: '5432'
+          image: 'postgres:15-alpine'
+          imagePullPolicy: IfNotPresent
+          name: init-db
+      securityContext: {}
+      serviceAccountName: squadquest-supabase-supabase-analytics
diff --git a/squadquest-supabase/Deployment/squadquest-supabase-supabase-auth.yaml b/squadquest-supabase/Deployment/squadquest-supabase-supabase-auth.yaml
new file mode 100644
index 0000000..3be581c
--- /dev/null
+++ b/squadquest-supabase/Deployment/squadquest-supabase-supabase-auth.yaml
@@ -0,0 +1,146 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-auth
+  namespace: squadquest-supabase
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: squadquest-supabase
+      app.kubernetes.io/name: supabase-auth
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: squadquest-supabase
+        app.kubernetes.io/name: supabase-auth
+    spec:
+      containers:
+        - env:
+            - name: API_EXTERNAL_URL
+              value: 'http://example.com'
+            - name: DB_DRIVER
+              value: postgres
+            - name: DB_PORT
+              value: '5432'
+            - name: DB_SSL
+              value: disable
+            - name: DB_USER
+              value: supabase_auth_admin
+            - name: GOTRUE_API_HOST
+              value: 0.0.0.0
+            - name: GOTRUE_API_PORT
+              value: '9999'
+            - name: GOTRUE_DISABLE_SIGNUP
+              value: 'false'
+            - name: GOTRUE_EXTERNAL_EMAIL_ENABLED
+              value: 'true'
+            - name: GOTRUE_EXTERNAL_PHONE_ENABLED
+              value: 'false'
+            - name: GOTRUE_JWT_ADMIN_ROLES
+              value: service_role
+            - name: GOTRUE_JWT_AUD
+              value: authenticated
+            - name: GOTRUE_JWT_DEFAULT_GROUP_NAME
+              value: authenticated
+            - name: GOTRUE_JWT_EXP
+              value: '3600'
+            - name: GOTRUE_MAILER_AUTOCONFIRM
+              value: 'true'
+            - name: GOTRUE_MAILER_URLPATHS_CONFIRMATION
+              value: /auth/v1/verify
+            - name: GOTRUE_MAILER_URLPATHS_EMAIL_CHANGE
+              value: /auth/v1/verify
+            - name: GOTRUE_MAILER_URLPATHS_INVITE
+              value: /auth/v1/verify
+            - name: GOTRUE_MAILER_URLPATHS_RECOVERY
+              value: /auth/v1/verify
+            - name: GOTRUE_SITE_URL
+              value: 'http://example.com'
+            - name: GOTRUE_SMS_AUTOCONFIRM
+              value: 'false'
+            - name: GOTRUE_SMTP_ADMIN_EMAIL
+              value: SMTP_ADMIN_MAIL
+            - name: GOTRUE_SMTP_HOST
+              value: SMTP_HOST
+            - name: GOTRUE_SMTP_PORT
+              value: SMTP_PORT
+            - name: GOTRUE_SMTP_SENDER_NAME
+              value: SMTP_SENDER_NAME
+            - name: GOTRUE_URI_ALLOW_LIST
+              value: '*'
+            - name: DB_HOST
+              value: squadquest-supabase-supabase-db
+            - name: DB_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  key: password
+                  name: squadquest-supabase-db
+            - name: DB_PASSWORD_ENC
+              valueFrom:
+                secretKeyRef:
+                  key: password_encoded
+                  name: squadquest-supabase-db
+            - name: DB_NAME
+              valueFrom:
+                secretKeyRef:
+                  key: database
+                  name: squadquest-supabase-db
+            - name: GOTRUE_DB_DATABASE_URL
+              value: >-
+                $(DB_DRIVER)://$(DB_USER):$(DB_PASSWORD_ENC)@$(DB_HOST):$(DB_PORT)/$(DB_NAME)?search_path=auth&sslmode=$(DB_SSL)
+            - name: GOTRUE_DB_DRIVER
+              value: $(DB_DRIVER)
+            - name: GOTRUE_JWT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  key: secret
+                  name: squadquest-supabase-jwt
+            - name: GOTRUE_SMTP_USER
+              valueFrom:
+                secretKeyRef:
+                  key: username
+                  name: squadquest-supabase-smtp
+            - name: GOTRUE_SMTP_PASS
+              valueFrom:
+                secretKeyRef:
+                  key: password
+                  name: squadquest-supabase-smtp
+          image: 'supabase/gotrue:v2.164.0'
+          imagePullPolicy: IfNotPresent
+          name: supabase-auth
+          ports:
+            - containerPort: 9999
+              name: http
+              protocol: TCP
+          securityContext: {}
+      initContainers:
+        - args:
+            - |
+              until pg_isready -h $(DB_HOST) -p $(DB_PORT) -U $(DB_USER); do
+              echo "Waiting for database to start..."
+              sleep 2
+              done
+            - echo "Database is ready"
+          command:
+            - /bin/sh
+            - '-c'
+          env:
+            - name: DB_HOST
+              value: squadquest-supabase-supabase-db
+            - name: DB_USER
+              valueFrom:
+                secretKeyRef:
+                  key: username
+                  name: squadquest-supabase-db
+            - name: DB_PORT
+              value: '5432'
+          image: 'postgres:15-alpine'
+          imagePullPolicy: IfNotPresent
+          name: init-db
+      securityContext: {}
+      serviceAccountName: squadquest-supabase-supabase-auth
diff --git a/squadquest-supabase/Deployment/squadquest-supabase-supabase-db.yaml b/squadquest-supabase/Deployment/squadquest-supabase-supabase-db.yaml
new file mode 100644
index 0000000..86ca4f6
--- /dev/null
+++ b/squadquest-supabase/Deployment/squadquest-supabase-supabase-db.yaml
@@ -0,0 +1,128 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-db
+  namespace: squadquest-supabase
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: squadquest-supabase
+      app.kubernetes.io/name: supabase-db
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: squadquest-supabase
+        app.kubernetes.io/name: supabase-db
+    spec:
+      containers:
+        - env:
+            - name: JWT_EXP
+              value: '3600'
+            - name: PGPORT
+              value: '5432'
+            - name: POSTGRES_HOST
+              value: /var/run/postgresql
+            - name: POSTGRES_PORT
+              value: '5432'
+            - name: POSTGRES_USER
+              valueFrom:
+                secretKeyRef:
+                  key: username
+                  name: squadquest-supabase-db
+            - name: PGPASSWORD
+              valueFrom:
+                secretKeyRef:
+                  key: password
+                  name: squadquest-supabase-db
+            - name: POSTGRES_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  key: password
+                  name: squadquest-supabase-db
+            - name: PGDATABASE
+              valueFrom:
+                secretKeyRef:
+                  key: database
+                  name: squadquest-supabase-db
+            - name: POSTGRES_DB
+              valueFrom:
+                secretKeyRef:
+                  key: database
+                  name: squadquest-supabase-db
+          image: 'supabase/postgres:15.6.1.143'
+          imagePullPolicy: IfNotPresent
+          livenessProbe:
+            exec:
+              command:
+                - pg_isready
+                - '-U'
+                - postgres
+            initialDelaySeconds: 3
+          name: supabase-db
+          ports:
+            - containerPort: 9999
+              name: http
+              protocol: TCP
+          securityContext: {}
+          volumeMounts:
+            - mountPath: /docker-entrypoint-initdb.d
+              name: initdb-scripts-data
+            - mountPath: /var/lib/postgresql/data
+              name: postgres-volume
+              subPath: postgres-data
+      initContainers:
+        - args:
+            - >
+              echo "Copying init scripts into existing image script
+              directory..."
+
+              cp -r /docker-entrypoint-initdb.d/* /initdb.d/
+
+              cp /custom-init-scripts/98-webhooks.sql /initdb.d/init-scripts/
+
+              cp /custom-init-scripts/99-roles.sql /initdb.d/init-scripts/
+
+              cp /custom-init-scripts/99-logs.sql /initdb.d/migrations/
+
+              cp /custom-init-scripts/99-realtime.sql /initdb.d/migrations/
+
+
+              echo "Copying user-defined migration scripts..."
+
+              cp /custom-migrations/* /initdb.d/migrations/ || echo "Skip
+              migrations"
+
+              echo "Initialization scripts are ready"
+          command:
+            - /bin/sh
+            - '-c'
+          image: 'supabase/postgres:15.6.1.143'
+          imagePullPolicy: IfNotPresent
+          name: init-db
+          volumeMounts:
+            - mountPath: /custom-init-scripts
+              name: custom-init-scripts
+            - mountPath: /custom-migrations
+              name: custom-migrations
+            - mountPath: /initdb.d
+              name: initdb-scripts-data
+      securityContext: {}
+      serviceAccountName: squadquest-supabase-supabase-db
+      volumes:
+        - emptyDir:
+            medium: ''
+          name: initdb-scripts-data
+        - configMap:
+            name: squadquest-supabase-supabase-db-initdb
+          name: custom-init-scripts
+        - configMap:
+            name: squadquest-supabase-supabase-db-migrations
+          name: custom-migrations
+        - name: postgres-volume
+          persistentVolumeClaim:
+            claimName: squadquest-supabase-supabase-db-pvc
diff --git a/squadquest-supabase/Deployment/squadquest-supabase-supabase-functions.yaml b/squadquest-supabase/Deployment/squadquest-supabase-supabase-functions.yaml
new file mode 100644
index 0000000..747883d
--- /dev/null
+++ b/squadquest-supabase/Deployment/squadquest-supabase-supabase-functions.yaml
@@ -0,0 +1,83 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-functions
+  namespace: squadquest-supabase
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: squadquest-supabase
+      app.kubernetes.io/name: supabase-functions
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: squadquest-supabase
+        app.kubernetes.io/name: supabase-functions
+    spec:
+      containers:
+        - args:
+            - start
+            - '--main-service'
+            - /home/deno/functions/main
+          env:
+            - name: DB_DRIVER
+              value: postgresql
+            - name: DB_PORT
+              value: '5432'
+            - name: DB_SSL
+              value: disable
+            - name: DB_USERNAME
+              value: supabase_functions_admin
+            - name: DB_HOSTNAME
+              value: squadquest-supabase-supabase-db
+            - name: DB_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  key: password
+                  name: squadquest-supabase-db
+            - name: DB_PASSWORD_ENC
+              valueFrom:
+                secretKeyRef:
+                  key: password_encoded
+                  name: squadquest-supabase-db
+            - name: DB_DATABASE
+              valueFrom:
+                secretKeyRef:
+                  key: database
+                  name: squadquest-supabase-db
+            - name: JWT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  key: secret
+                  name: squadquest-supabase-jwt
+            - name: SUPABASE_ANON_KEY
+              valueFrom:
+                secretKeyRef:
+                  key: anonKey
+                  name: squadquest-supabase-jwt
+            - name: SUPABASE_SERVICE_ROLE_KEY
+              valueFrom:
+                secretKeyRef:
+                  key: serviceKey
+                  name: squadquest-supabase-jwt
+            - name: POSTGRES_BACKEND_URL
+              value: >-
+                $(DB_DRIVER)://$(DB_USERNAME):$(DB_PASSWORD_ENC)@$(DB_HOSTNAME):$(DB_PORT)/$(DB_DATABASE)?search_path=auth&sslmode=$(DB_SSL)
+          image: 'supabase/edge-runtime:v1.65.3'
+          imagePullPolicy: IfNotPresent
+          name: supabase-functions
+          securityContext: {}
+          volumeMounts:
+            - mountPath: /home/deno/functions/main
+              name: functions-main
+      securityContext: {}
+      serviceAccountName: squadquest-supabase-supabase-functions
+      volumes:
+        - configMap:
+            name: squadquest-supabase-supabase-functions-main
+          name: functions-main
diff --git a/squadquest-supabase/Deployment/squadquest-supabase-supabase-imgproxy.yaml b/squadquest-supabase/Deployment/squadquest-supabase-supabase-imgproxy.yaml
new file mode 100644
index 0000000..570b5ec
--- /dev/null
+++ b/squadquest-supabase/Deployment/squadquest-supabase-supabase-imgproxy.yaml
@@ -0,0 +1,48 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-imgproxy
+  namespace: squadquest-supabase
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: squadquest-supabase
+      app.kubernetes.io/name: supabase-imgproxy
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: squadquest-supabase
+        app.kubernetes.io/name: supabase-imgproxy
+    spec:
+      containers:
+        - env:
+            - name: IMGPROXY_BIND
+              value: ':5001'
+            - name: IMGPROXY_ENABLE_WEBP_DETECTION
+              value: 'true'
+            - name: IMGPROXY_LOCAL_FILESYSTEM_ROOT
+              value: /
+            - name: IMGPROXY_USE_ETAG
+              value: 'true'
+          image: 'darthsim/imgproxy:v3'
+          imagePullPolicy: IfNotPresent
+          name: supabase-imgproxy
+          ports:
+            - containerPort: 8080
+              name: http
+              protocol: TCP
+          securityContext: {}
+          volumeMounts:
+            - mountPath: /var/lib/storage
+              name: imgproxy-volume
+      securityContext: {}
+      serviceAccountName: squadquest-supabase-supabase-imgproxy
+      volumes:
+        - name: imgproxy-volume
+          persistentVolumeClaim:
+            claimName: squadquest-supabase-supabase-imgproxy-pvc
diff --git a/squadquest-supabase/Deployment/squadquest-supabase-supabase-kong.yaml b/squadquest-supabase/Deployment/squadquest-supabase-supabase-kong.yaml
new file mode 100644
index 0000000..9c4c1bf
--- /dev/null
+++ b/squadquest-supabase/Deployment/squadquest-supabase-supabase-kong.yaml
@@ -0,0 +1,92 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-kong
+  namespace: squadquest-supabase
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: squadquest-supabase
+      app.kubernetes.io/name: supabase-kong
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: squadquest-supabase
+        app.kubernetes.io/name: supabase-kong
+    spec:
+      containers:
+        - args:
+            - /scripts/wrapper.sh
+          command:
+            - /bin/bash
+          env:
+            - name: KONG_DATABASE
+              value: 'off'
+            - name: KONG_DECLARATIVE_CONFIG
+              value: /usr/local/kong/kong.yml
+            - name: KONG_DNS_ORDER
+              value: 'LAST,A,CNAME'
+            - name: KONG_LOG_LEVEL
+              value: warn
+            - name: KONG_NGINX_PROXY_PROXY_BUFFERS
+              value: 64 160k
+            - name: KONG_NGINX_PROXY_PROXY_BUFFER_SIZE
+              value: 160k
+            - name: KONG_PLUGINS
+              value: 'request-transformer,cors,key-auth,acl,basic-auth'
+            - name: SUPABASE_ANON_KEY
+              valueFrom:
+                secretKeyRef:
+                  key: anonKey
+                  name: squadquest-supabase-jwt
+            - name: SUPABASE_SERVICE_KEY
+              valueFrom:
+                secretKeyRef:
+                  key: serviceKey
+                  name: squadquest-supabase-jwt
+            - name: DASHBOARD_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  key: username
+                  name: squadquest-supabase-dashboard
+            - name: DASHBOARD_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  key: password
+                  name: squadquest-supabase-dashboard
+          image: 'kong:2.8.5'
+          imagePullPolicy: IfNotPresent
+          name: supabase-kong
+          ports:
+            - containerPort: 8000
+              name: http
+              protocol: TCP
+          securityContext: {}
+          volumeMounts:
+            - mountPath: /usr/local/kong/template.yml
+              name: config
+              subPath: template.yml
+            - mountPath: /scripts
+              name: wrapper
+      securityContext: {}
+      serviceAccountName: squadquest-supabase-supabase-kong
+      volumes:
+        - configMap:
+            defaultMode: 511
+            items:
+              - key: template.yml
+                path: template.yml
+            name: squadquest-supabase-supabase-kong
+          name: config
+        - configMap:
+            defaultMode: 511
+            items:
+              - key: wrapper.sh
+                path: wrapper.sh
+            name: squadquest-supabase-supabase-kong
+          name: wrapper
diff --git a/squadquest-supabase/Deployment/squadquest-supabase-supabase-meta.yaml b/squadquest-supabase/Deployment/squadquest-supabase-supabase-meta.yaml
new file mode 100644
index 0000000..781ee96
--- /dev/null
+++ b/squadquest-supabase/Deployment/squadquest-supabase-supabase-meta.yaml
@@ -0,0 +1,67 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-meta
+  namespace: squadquest-supabase
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: squadquest-supabase
+      app.kubernetes.io/name: supabase-meta
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: squadquest-supabase
+        app.kubernetes.io/name: supabase-meta
+    spec:
+      containers:
+        - env:
+            - name: DB_DRIVER
+              value: postgres
+            - name: DB_PORT
+              value: '5432'
+            - name: DB_SSL
+              value: disable
+            - name: DB_USER
+              value: supabase_admin
+            - name: PG_META_PORT
+              value: '8080'
+            - name: DB_HOST
+              value: squadquest-supabase-supabase-db
+            - name: DB_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  key: password
+                  name: squadquest-supabase-db
+            - name: DB_NAME
+              valueFrom:
+                secretKeyRef:
+                  key: database
+                  name: squadquest-supabase-db
+            - name: PG_META_DB_HOST
+              value: $(DB_HOST)
+            - name: PG_META_DB_PORT
+              value: $(DB_PORT)
+            - name: PG_META_DB_NAME
+              value: $(DB_NAME)
+            - name: PG_META_DB_USER
+              value: $(DB_USER)
+            - name: PG_META_DB_PASSWORD
+              value: $(DB_PASSWORD)
+            - name: PG_META_DB_SSL_MODE
+              value: $(DB_SSL)
+          image: 'supabase/postgres-meta:v0.84.3'
+          imagePullPolicy: IfNotPresent
+          name: supabase-meta
+          ports:
+            - containerPort: 8080
+              name: http
+              protocol: TCP
+          securityContext: {}
+      securityContext: {}
+      serviceAccountName: squadquest-supabase-supabase-meta
diff --git a/squadquest-supabase/Deployment/squadquest-supabase-supabase-realtime.yaml b/squadquest-supabase/Deployment/squadquest-supabase-supabase-realtime.yaml
new file mode 100644
index 0000000..7e328e2
--- /dev/null
+++ b/squadquest-supabase/Deployment/squadquest-supabase-supabase-realtime.yaml
@@ -0,0 +1,110 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-realtime
+  namespace: squadquest-supabase
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: squadquest-supabase
+      app.kubernetes.io/name: supabase-realtime
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: squadquest-supabase
+        app.kubernetes.io/name: supabase-realtime
+    spec:
+      containers:
+        - args:
+            - '-c'
+            - >-
+              /app/bin/migrate && /app/bin/realtime eval
+              'Realtime.Release.seeds(Realtime.Repo)' && /app/bin/server
+          command:
+            - /bin/sh
+          env:
+            - name: DB_AFTER_CONNECT_QUERY
+              value: SET search_path TO _realtime
+            - name: DB_ENC_KEY
+              value: supabaserealtime
+            - name: DB_PORT
+              value: '5432'
+            - name: DB_SSL
+              value: disable
+            - name: DB_USER
+              value: supabase_admin
+            - name: DNS_NODES
+              value: ''''''
+            - name: ENABLE_TAILSCALE
+              value: 'false'
+            - name: ERL_AFLAGS
+              value: '-proto_dist inet_tcp'
+            - name: FLY_ALLOC_ID
+              value: fly123
+            - name: FLY_APP_NAME
+              value: realtime
+            - name: PORT
+              value: '4000'
+            - name: SECRET_KEY_BASE
+              value: UpNVntn3cDxHJpq99YMc1T1AQgQpc8kfYTuRgBiYa15BLrx8etQoXz3gZv1/u2oq
+            - name: DB_HOST
+              value: squadquest-supabase-supabase-db
+            - name: DB_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  key: password
+                  name: squadquest-supabase-db
+            - name: DB_NAME
+              valueFrom:
+                secretKeyRef:
+                  key: database
+                  name: squadquest-supabase-db
+            - name: JWT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  key: secret
+                  name: squadquest-supabase-jwt
+            - name: API_JWT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  key: secret
+                  name: squadquest-supabase-jwt
+          image: 'supabase/realtime:v2.33.61'
+          imagePullPolicy: IfNotPresent
+          name: supabase-realtime
+          ports:
+            - containerPort: 4000
+              name: http
+              protocol: TCP
+          securityContext: {}
+      initContainers:
+        - args:
+            - |
+              until pg_isready -h $(DB_HOST) -p $(DB_PORT) -U $(DB_USER); do
+              echo "Waiting for database to start..."
+              sleep 2
+              done
+            - echo "Database is ready"
+          command:
+            - /bin/sh
+            - '-c'
+          env:
+            - name: DB_HOST
+              value: squadquest-supabase-supabase-db
+            - name: DB_USER
+              valueFrom:
+                secretKeyRef:
+                  key: username
+                  name: squadquest-supabase-db
+            - name: DB_PORT
+              value: '5432'
+          image: 'postgres:15-alpine'
+          imagePullPolicy: IfNotPresent
+          name: init-db
+      securityContext: {}
+      serviceAccountName: squadquest-supabase-supabase-realtime
diff --git a/squadquest-supabase/Deployment/squadquest-supabase-supabase-rest.yaml b/squadquest-supabase/Deployment/squadquest-supabase-supabase-rest.yaml
new file mode 100644
index 0000000..2204157
--- /dev/null
+++ b/squadquest-supabase/Deployment/squadquest-supabase-supabase-rest.yaml
@@ -0,0 +1,79 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-rest
+  namespace: squadquest-supabase
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: squadquest-supabase
+      app.kubernetes.io/name: supabase-rest
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: squadquest-supabase
+        app.kubernetes.io/name: supabase-rest
+    spec:
+      containers:
+        - env:
+            - name: DB_DRIVER
+              value: postgres
+            - name: DB_PORT
+              value: '5432'
+            - name: DB_SSL
+              value: disable
+            - name: DB_USER
+              value: authenticator
+            - name: PGRST_APP_SETTINGS_JWT_EXP
+              value: '3600'
+            - name: PGRST_DB_ANON_ROLE
+              value: anon
+            - name: PGRST_DB_SCHEMAS
+              value: 'public,storage,graphql_public'
+            - name: PGRST_DB_USE_LEGACY_GUCS
+              value: 'false'
+            - name: DB_HOST
+              value: squadquest-supabase-supabase-db
+            - name: DB_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  key: password
+                  name: squadquest-supabase-db
+            - name: DB_PASSWORD_ENC
+              valueFrom:
+                secretKeyRef:
+                  key: password_encoded
+                  name: squadquest-supabase-db
+            - name: DB_NAME
+              valueFrom:
+                secretKeyRef:
+                  key: database
+                  name: squadquest-supabase-db
+            - name: PGRST_DB_URI
+              value: >-
+                $(DB_DRIVER)://$(DB_USER):$(DB_PASSWORD_ENC)@$(DB_HOST):$(DB_PORT)/$(DB_NAME)?sslmode=$(DB_SSL)
+            - name: PGRST_JWT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  key: secret
+                  name: squadquest-supabase-jwt
+            - name: PGRST_APP_SETTINGS_JWT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  key: secret
+                  name: squadquest-supabase-jwt
+          image: 'postgrest/postgrest:v12.2.3'
+          imagePullPolicy: IfNotPresent
+          name: supabase-rest
+          ports:
+            - containerPort: 3000
+              name: http
+              protocol: TCP
+          securityContext: {}
+      securityContext: {}
+      serviceAccountName: squadquest-supabase-supabase-rest
diff --git a/squadquest-supabase/Deployment/squadquest-supabase-supabase-storage.yaml b/squadquest-supabase/Deployment/squadquest-supabase-supabase-storage.yaml
new file mode 100644
index 0000000..a6e868f
--- /dev/null
+++ b/squadquest-supabase/Deployment/squadquest-supabase-supabase-storage.yaml
@@ -0,0 +1,130 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-storage
+  namespace: squadquest-supabase
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: squadquest-supabase
+      app.kubernetes.io/name: supabase-storage
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: squadquest-supabase
+        app.kubernetes.io/name: supabase-storage
+    spec:
+      containers:
+        - env:
+            - name: DB_DRIVER
+              value: postgres
+            - name: DB_PORT
+              value: '5432'
+            - name: DB_SSL
+              value: disable
+            - name: DB_USER
+              value: supabase_storage_admin
+            - name: FILE_SIZE_LIMIT
+              value: '52428800'
+            - name: FILE_STORAGE_BACKEND_PATH
+              value: /var/lib/storage
+            - name: GLOBAL_S3_BUCKET
+              value: squadquest-supabase-storage
+            - name: GLOBAL_S3_ENDPOINT
+              value: us-east-1.linodeobjects.com
+            - name: GLOBAL_S3_PROTOCOL
+              value: https
+            - name: PGOPTIONS
+              value: '-c search_path=storage,public'
+            - name: REGION
+              value: stub
+            - name: STORAGE_BACKEND
+              value: s3
+            - name: TENANT_ID
+              value: stub
+            - name: DB_HOST
+              value: squadquest-supabase-supabase-db
+            - name: POSTGREST_URL
+              value: 'http://squadquest-supabase-supabase-rest:3000'
+            - name: DB_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  key: password
+                  name: squadquest-supabase-db
+            - name: DB_PASSWORD_ENC
+              valueFrom:
+                secretKeyRef:
+                  key: password_encoded
+                  name: squadquest-supabase-db
+            - name: DB_NAME
+              valueFrom:
+                secretKeyRef:
+                  key: database
+                  name: squadquest-supabase-db
+            - name: DATABASE_URL
+              value: >-
+                $(DB_DRIVER)://$(DB_USER):$(DB_PASSWORD_ENC)@$(DB_HOST):$(DB_PORT)/$(DB_NAME)?search_path=auth&sslmode=$(DB_SSL)
+            - name: PGRST_JWT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  key: secret
+                  name: squadquest-supabase-jwt
+            - name: ANON_KEY
+              valueFrom:
+                secretKeyRef:
+                  key: anonKey
+                  name: squadquest-supabase-jwt
+            - name: SERVICE_KEY
+              valueFrom:
+                secretKeyRef:
+                  key: serviceKey
+                  name: squadquest-supabase-jwt
+            - name: IMGPROXY_URL
+              value: 'http://squadquest-supabase-supabase-imgproxy:5001'
+          image: 'supabase/storage-api:v1.13.3'
+          imagePullPolicy: IfNotPresent
+          name: supabase-storage
+          ports:
+            - containerPort: 5000
+              name: http
+              protocol: TCP
+          securityContext: {}
+          volumeMounts:
+            - mountPath: /var/lib/storage
+              name: storage-data
+      initContainers:
+        - args:
+            - |
+              until pg_isready -h $(DB_HOST) -p $(DB_PORT) -U $(DB_USER); do
+              echo "Waiting for database to start..."
+              sleep 2
+              done
+            - echo "Database is ready"
+          command:
+            - /bin/sh
+            - '-c'
+          env:
+            - name: DB_HOST
+              value: squadquest-supabase-supabase-db
+            - name: DB_USER
+              valueFrom:
+                secretKeyRef:
+                  key: username
+                  name: squadquest-supabase-db
+            - name: DB_PORT
+              value: '5432'
+          image: 'postgres:15-alpine'
+          imagePullPolicy: IfNotPresent
+          name: init-db
+      restartPolicy: Always
+      securityContext: {}
+      serviceAccountName: squadquest-supabase-supabase-storage
+      volumes:
+        - name: storage-data
+          persistentVolumeClaim:
+            claimName: squadquest-supabase-supabase-storage-pvc
diff --git a/squadquest-supabase/Deployment/squadquest-supabase-supabase-studio.yaml b/squadquest-supabase/Deployment/squadquest-supabase-supabase-studio.yaml
new file mode 100644
index 0000000..bdbe863
--- /dev/null
+++ b/squadquest-supabase/Deployment/squadquest-supabase-supabase-studio.yaml
@@ -0,0 +1,66 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-studio
+  namespace: squadquest-supabase
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: squadquest-supabase
+      app.kubernetes.io/name: supabase-studio
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: squadquest-supabase
+        app.kubernetes.io/name: supabase-studio
+    spec:
+      containers:
+        - env:
+            - name: NEXT_ANALYTICS_BACKEND_PROVIDER
+              value: postgres
+            - name: NEXT_PUBLIC_ENABLE_LOGS
+              value: 'true'
+            - name: STUDIO_DEFAULT_ORGANIZATION
+              value: Default Organization
+            - name: STUDIO_DEFAULT_PROJECT
+              value: Default Project
+            - name: STUDIO_PORT
+              value: '3000'
+            - name: SUPABASE_PUBLIC_URL
+              value: 'http://example.com'
+            - name: SUPABASE_URL
+              value: 'http://squadquest-supabase-supabase-kong:8000'
+            - name: STUDIO_PG_META_URL
+              value: 'http://squadquest-supabase-supabase-meta:8080'
+            - name: SUPABASE_ANON_KEY
+              valueFrom:
+                secretKeyRef:
+                  key: anonKey
+                  name: squadquest-supabase-jwt
+            - name: SUPABASE_SERVICE_KEY
+              valueFrom:
+                secretKeyRef:
+                  key: serviceKey
+                  name: squadquest-supabase-jwt
+            - name: LOGFLARE_URL
+              value: 'http://squadquest-supabase-supabase-analytics:4000'
+            - name: LOGFLARE_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  key: apiKey
+                  name: squadquest-supabase-analytics
+          image: 'supabase/studio:20241111-d7c6eb1'
+          imagePullPolicy: IfNotPresent
+          name: supabase-studio
+          ports:
+            - containerPort: 3000
+              name: http
+              protocol: TCP
+          securityContext: {}
+      securityContext: {}
+      serviceAccountName: squadquest-supabase-supabase-studio
diff --git a/squadquest-supabase/Deployment/squadquest-supabase-supabase-vector.yaml b/squadquest-supabase/Deployment/squadquest-supabase-supabase-vector.yaml
new file mode 100644
index 0000000..728cd98
--- /dev/null
+++ b/squadquest-supabase/Deployment/squadquest-supabase-supabase-vector.yaml
@@ -0,0 +1,59 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+    vector.dev/exclude: 'true'
+  name: squadquest-supabase-supabase-vector
+  namespace: squadquest-supabase
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: squadquest-supabase
+      app.kubernetes.io/name: supabase-vector
+  template:
+    metadata:
+      annotations:
+        checksum/config: 20b44986c49cfc3dbead809f8feb8f84165ddcc90119143488e5bb764b392705
+      labels:
+        app.kubernetes.io/instance: squadquest-supabase
+        app.kubernetes.io/name: supabase-vector
+    spec:
+      containers:
+        - args:
+            - '--config'
+            - /etc/vector/vector.yml
+          env:
+            - name: VECTOR_SELF_NODE_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+            - name: LOGFLARE_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  key: apiKey
+                  name: squadquest-supabase-analytics
+          image: 'timberio/vector:0.42.X-alpine'
+          imagePullPolicy: IfNotPresent
+          name: supabase-vector
+          ports:
+            - containerPort: 9001
+              protocol: TCP
+          securityContext: {}
+          volumeMounts:
+            - mountPath: /etc/vector/vector.yml
+              name: vector-config
+              subPath: vector.yml
+            - mountPath: /etc/vector/secret.sh
+              name: vector-config
+              subPath: secret.sh
+      securityContext: {}
+      serviceAccountName: squadquest-supabase-supabase-vector
+      volumes:
+        - configMap:
+            defaultMode: 511
+            name: squadquest-supabase-supabase-vector-config
+          name: vector-config
diff --git a/squadquest-supabase/Ingress/squadquest-supabase-supabase-kong.yaml b/squadquest-supabase/Ingress/squadquest-supabase-supabase-kong.yaml
new file mode 100644
index 0000000..9d0e02c
--- /dev/null
+++ b/squadquest-supabase/Ingress/squadquest-supabase-supabase-kong.yaml
@@ -0,0 +1,25 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-kong
+  namespace: squadquest-supabase
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: example.com
+      http:
+        paths:
+          - backend:
+              service:
+                name: squadquest-supabase-supabase-kong
+                port:
+                  number: 8000
+            path: /
+            pathType: Prefix
diff --git a/squadquest-supabase/Job/squadquest-supabase-test-analytics.yaml b/squadquest-supabase/Job/squadquest-supabase-test-analytics.yaml
new file mode 100644
index 0000000..6749a02
--- /dev/null
+++ b/squadquest-supabase/Job/squadquest-supabase-test-analytics.yaml
@@ -0,0 +1,28 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  annotations:
+    helm.sh/hook: test
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-test-analytics
+  namespace: squadquest-supabase
+spec:
+  template:
+    spec:
+      containers:
+        - command:
+            - /bin/bash
+            - '-c'
+            - |
+              curl -sfo /dev/null \
+                http://squadquest-supabase-supabase-analytics:4000/health
+              echo "Sevice squadquest-supabase-supabase-analytics is healthy."
+          image: kdevup/curljq
+          imagePullPolicy: IfNotPresent
+          name: test-analytics
+      restartPolicy: Never
+  ttlSecondsAfterFinished: 100
diff --git a/squadquest-supabase/Job/squadquest-supabase-test-auth.yaml b/squadquest-supabase/Job/squadquest-supabase-test-auth.yaml
new file mode 100644
index 0000000..e88aa97
--- /dev/null
+++ b/squadquest-supabase/Job/squadquest-supabase-test-auth.yaml
@@ -0,0 +1,28 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  annotations:
+    helm.sh/hook: test
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-test-auth
+  namespace: squadquest-supabase
+spec:
+  template:
+    spec:
+      containers:
+        - command:
+            - /bin/bash
+            - '-c'
+            - |
+              curl -sfo /dev/null \
+                http://squadquest-supabase-supabase-auth:9999/health
+              echo "Sevice squadquest-supabase-supabase-auth is healthy."
+          image: kdevup/curljq
+          imagePullPolicy: IfNotPresent
+          name: test-auth
+      restartPolicy: Never
+  ttlSecondsAfterFinished: 100
diff --git a/squadquest-supabase/Job/squadquest-supabase-test-db.yaml b/squadquest-supabase/Job/squadquest-supabase-test-db.yaml
new file mode 100644
index 0000000..b104862
--- /dev/null
+++ b/squadquest-supabase/Job/squadquest-supabase-test-db.yaml
@@ -0,0 +1,39 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  annotations:
+    helm.sh/hook: test
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-test-db
+  namespace: squadquest-supabase
+spec:
+  template:
+    spec:
+      containers:
+        - command:
+            - /bin/sh
+            - '-c'
+            - >
+              pg_isready -h $(DB_HOST) -p $(DB_PORT) -U $(DB_USER) || $(echo
+              "\e[0;31mFailed to connect to the database." && exit 1)
+
+              echo "Database is ready"
+          env:
+            - name: DB_HOST
+              value: squadquest-supabase-supabase-db
+            - name: DB_USER
+              valueFrom:
+                secretKeyRef:
+                  key: username
+                  name: squadquest-supabase-db
+            - name: DB_PORT
+              value: '5432'
+          image: 'postgres:15-alpine'
+          imagePullPolicy: IfNotPresent
+          name: test-db
+      restartPolicy: Never
+  ttlSecondsAfterFinished: 100
diff --git a/squadquest-supabase/Job/squadquest-supabase-test-imgproxy.yaml b/squadquest-supabase/Job/squadquest-supabase-test-imgproxy.yaml
new file mode 100644
index 0000000..24175eb
--- /dev/null
+++ b/squadquest-supabase/Job/squadquest-supabase-test-imgproxy.yaml
@@ -0,0 +1,28 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  annotations:
+    helm.sh/hook: test
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-test-imgproxy
+  namespace: squadquest-supabase
+spec:
+  template:
+    spec:
+      containers:
+        - command:
+            - /bin/bash
+            - '-c'
+            - |
+              curl -sfo /dev/null \
+                http://squadquest-supabase-supabase-imgproxy:5001/health
+              echo "Sevice squadquest-supabase-supabase-imgproxy is healthy."
+          image: kdevup/curljq
+          imagePullPolicy: IfNotPresent
+          name: test-imgproxy
+      restartPolicy: Never
+  ttlSecondsAfterFinished: 100
diff --git a/squadquest-supabase/Job/squadquest-supabase-test-kong.yaml b/squadquest-supabase/Job/squadquest-supabase-test-kong.yaml
new file mode 100644
index 0000000..87dd684
--- /dev/null
+++ b/squadquest-supabase/Job/squadquest-supabase-test-kong.yaml
@@ -0,0 +1,42 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  annotations:
+    helm.sh/hook: test
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-test-kong
+  namespace: squadquest-supabase
+spec:
+  template:
+    spec:
+      containers:
+        - command:
+            - /bin/bash
+            - '-c'
+            - |
+              echo "Attempting to access dashboard with provided credentials..."
+              curl -sL --fail \
+                -o /dev/null \
+                "http://${DASHBOARD_USERNAME}:${DASHBOARD_PASSWORD}@squadquest-supabase-supabase-kong:8000" \
+                || ( echo -e "\e[0;31mFailed to get a valid response." && exit 1 )
+              echo "Successfully connected."
+          env:
+            - name: DASHBOARD_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  key: username
+                  name: squadquest-supabase-dashboard
+            - name: DASHBOARD_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  key: password
+                  name: squadquest-supabase-dashboard
+          image: kdevup/curljq
+          imagePullPolicy: IfNotPresent
+          name: test-kong
+      restartPolicy: Never
+  ttlSecondsAfterFinished: 100
diff --git a/squadquest-supabase/Job/squadquest-supabase-test-meta.yaml b/squadquest-supabase/Job/squadquest-supabase-test-meta.yaml
new file mode 100644
index 0000000..d6da7dd
--- /dev/null
+++ b/squadquest-supabase/Job/squadquest-supabase-test-meta.yaml
@@ -0,0 +1,28 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  annotations:
+    helm.sh/hook: test
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-test-meta
+  namespace: squadquest-supabase
+spec:
+  template:
+    spec:
+      containers:
+        - command:
+            - /bin/bash
+            - '-c'
+            - |
+              curl -sfo /dev/null \
+                http://squadquest-supabase-supabase-meta:8080/health
+              echo "Sevice squadquest-supabase-supabase-meta is healthy."
+          image: kdevup/curljq
+          imagePullPolicy: IfNotPresent
+          name: test-meta
+      restartPolicy: Never
+  ttlSecondsAfterFinished: 100
diff --git a/squadquest-supabase/Job/squadquest-supabase-test-realtime.yaml b/squadquest-supabase/Job/squadquest-supabase-test-realtime.yaml
new file mode 100644
index 0000000..521d3f6
--- /dev/null
+++ b/squadquest-supabase/Job/squadquest-supabase-test-realtime.yaml
@@ -0,0 +1,28 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  annotations:
+    helm.sh/hook: test
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-test-realtime
+  namespace: squadquest-supabase
+spec:
+  template:
+    spec:
+      containers:
+        - command:
+            - /bin/bash
+            - '-c'
+            - |
+              curl -sfo /dev/null \
+                http://squadquest-supabase-supabase-realtime:4000
+              echo "Sevice squadquest-supabase-supabase-realtime is healthy."
+          image: kdevup/curljq
+          imagePullPolicy: IfNotPresent
+          name: test-realtime
+      restartPolicy: Never
+  ttlSecondsAfterFinished: 100
diff --git a/squadquest-supabase/Job/squadquest-supabase-test-rest.yaml b/squadquest-supabase/Job/squadquest-supabase-test-rest.yaml
new file mode 100644
index 0000000..eb16c61
--- /dev/null
+++ b/squadquest-supabase/Job/squadquest-supabase-test-rest.yaml
@@ -0,0 +1,28 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  annotations:
+    helm.sh/hook: test
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-test-rest
+  namespace: squadquest-supabase
+spec:
+  template:
+    spec:
+      containers:
+        - command:
+            - /bin/bash
+            - '-c'
+            - |
+              curl -sfo /dev/null \
+                http://squadquest-supabase-supabase-rest:3000
+              echo "Sevice squadquest-supabase-supabase-rest is healthy."
+          image: kdevup/curljq
+          imagePullPolicy: IfNotPresent
+          name: test-rest
+      restartPolicy: Never
+  ttlSecondsAfterFinished: 100
diff --git a/squadquest-supabase/Job/squadquest-supabase-test-storage.yaml b/squadquest-supabase/Job/squadquest-supabase-test-storage.yaml
new file mode 100644
index 0000000..9149fe1
--- /dev/null
+++ b/squadquest-supabase/Job/squadquest-supabase-test-storage.yaml
@@ -0,0 +1,28 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  annotations:
+    helm.sh/hook: test
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-test-storage
+  namespace: squadquest-supabase
+spec:
+  template:
+    spec:
+      containers:
+        - command:
+            - /bin/bash
+            - '-c'
+            - |
+              curl -sfo /dev/null \
+                http://squadquest-supabase-supabase-storage:5000/status
+              echo "Sevice squadquest-supabase-supabase-storage is healthy."
+          image: kdevup/curljq
+          imagePullPolicy: IfNotPresent
+          name: test-storage
+      restartPolicy: Never
+  ttlSecondsAfterFinished: 100
diff --git a/squadquest-supabase/Job/squadquest-supabase-test-studio.yaml b/squadquest-supabase/Job/squadquest-supabase-test-studio.yaml
new file mode 100644
index 0000000..a418623
--- /dev/null
+++ b/squadquest-supabase/Job/squadquest-supabase-test-studio.yaml
@@ -0,0 +1,28 @@
+apiVersion: batch/v1
+kind: Job
+metadata:
+  annotations:
+    helm.sh/hook: test
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-test-studio
+  namespace: squadquest-supabase
+spec:
+  template:
+    spec:
+      containers:
+        - command:
+            - /bin/bash
+            - '-c'
+            - |
+              curl -sfo /dev/null \
+                http://squadquest-supabase-supabase-studio:3000/api/profile
+              echo "Sevice squadquest-supabase-supabase-studio is healthy."
+          image: kdevup/curljq
+          imagePullPolicy: IfNotPresent
+          name: test-studio
+      restartPolicy: Never
+  ttlSecondsAfterFinished: 100
diff --git a/squadquest-supabase/PersistentVolumeClaim/squadquest-supabase-supabase-db-pvc.yaml b/squadquest-supabase/PersistentVolumeClaim/squadquest-supabase-supabase-db-pvc.yaml
new file mode 100644
index 0000000..4b9bb90
--- /dev/null
+++ b/squadquest-supabase/PersistentVolumeClaim/squadquest-supabase-supabase-db-pvc.yaml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-db-pvc
+  namespace: squadquest-supabase
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 8Gi
diff --git a/squadquest-supabase/PersistentVolumeClaim/squadquest-supabase-supabase-imgproxy-pvc.yaml b/squadquest-supabase/PersistentVolumeClaim/squadquest-supabase-supabase-imgproxy-pvc.yaml
new file mode 100644
index 0000000..ea3ade0
--- /dev/null
+++ b/squadquest-supabase/PersistentVolumeClaim/squadquest-supabase-supabase-imgproxy-pvc.yaml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-imgproxy-pvc
+  namespace: squadquest-supabase
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 10Gi
diff --git a/squadquest-supabase/PersistentVolumeClaim/squadquest-supabase-supabase-storage-pvc.yaml b/squadquest-supabase/PersistentVolumeClaim/squadquest-supabase-supabase-storage-pvc.yaml
new file mode 100644
index 0000000..cb47d1e
--- /dev/null
+++ b/squadquest-supabase/PersistentVolumeClaim/squadquest-supabase-supabase-storage-pvc.yaml
@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-storage-pvc
+  namespace: squadquest-supabase
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 10Gi
diff --git a/squadquest-supabase/SealedSecret/linode-storage.yaml b/squadquest-supabase/SealedSecret/linode-storage.yaml
new file mode 100644
index 0000000..dff7508
--- /dev/null
+++ b/squadquest-supabase/SealedSecret/linode-storage.yaml
@@ -0,0 +1,18 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: linode-storage
+  namespace: squadquest-supabase
+spec:
+  encryptedData:
+    accessKey: >-
+      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
+    keyId: >-
+      AgC4KdEaX7bjblIqygOwBGA5xijraaYERYWWxb6txC5zw096l5f1OnBja0lQbPXO+LtGEq17ox0dOxxy7zqiMw8QmRheJITpIKVWX5NFPCaQmFPrkxletv0c4RSz/k/vpz/yjoqnGGPp7tAH+nivAV0ufpBPZyaLsfyAKcPYsyGIFA2AGjQBkjtALUUEkrWa1OVTJoJfH4+9lFzpgoU81on1nfnMHw/vYGcdHhiaGAP0rAJLJCpolETFOMS0BTOmuptFcYTUdPLNqlISr8EKa79xJUpSGa9s7UrObfKP0V2wW/c5aEN0cuBjSfnnUO42vxd7yQE+iCyLi2m0BRwpWZeuurI0Tkxu+1JpCEJANcewDtO7slOyEGQZqGVL1ANofidQz759PU/yBmtD0z7HCj3rsF3yFpqOHDVSlLaNUYLdvT3dkXMM2YIIP7Lyh7ZJnLDeYpH5iG/xVXzLjuTg8aK/DO02j+UPuUfnB/DDF1BsiKIZvt/2WNawyO1ApObjVi5yDQa5CZCgFkpN/sVA6p7T8JfPNAufXzwEA6+m+SPb/AOnZr8Gk7LRrGPufEnd7cz/aT/lb1IwMCrI+jrXmIj3aK7Yr0vnoBB+AB9WdQDpNuknw5V1NJGV6x8ZirfGBFHBPHXnCD4IoIFzGCUKk6T/nYo9gNbmozaWI0T7AqTCo/XAywJz/hMpW0GsYJCJm+PSKhJCP+LXE5BwCybDKH+PkoCGGA==
+  template:
+    metadata:
+      creationTimestamp: null
+      name: linode-storage
+      namespace: squadquest-supabase
+    type: Opaque
diff --git a/squadquest-supabase/Secret/squadquest-supabase-analytics.yaml b/squadquest-supabase/Secret/squadquest-supabase-analytics.yaml
new file mode 100644
index 0000000..fc431b6
--- /dev/null
+++ b/squadquest-supabase/Secret/squadquest-supabase-analytics.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+data: null
+kind: Secret
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-analytics
+  namespace: squadquest-supabase
+type: Opaque
diff --git a/squadquest-supabase/Secret/squadquest-supabase-dashboard.yaml b/squadquest-supabase/Secret/squadquest-supabase-dashboard.yaml
new file mode 100644
index 0000000..6d67afe
--- /dev/null
+++ b/squadquest-supabase/Secret/squadquest-supabase-dashboard.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+data: null
+kind: Secret
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-dashboard
+  namespace: squadquest-supabase
+type: Opaque
diff --git a/squadquest-supabase/Secret/squadquest-supabase-db.yaml b/squadquest-supabase/Secret/squadquest-supabase-db.yaml
new file mode 100644
index 0000000..1c977c6
--- /dev/null
+++ b/squadquest-supabase/Secret/squadquest-supabase-db.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+data:
+  password_encoded: null
+kind: Secret
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-db
+  namespace: squadquest-supabase
+type: Opaque
diff --git a/squadquest-supabase/Secret/squadquest-supabase-jwt.yaml b/squadquest-supabase/Secret/squadquest-supabase-jwt.yaml
new file mode 100644
index 0000000..8c4a8f4
--- /dev/null
+++ b/squadquest-supabase/Secret/squadquest-supabase-jwt.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+data: null
+kind: Secret
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-jwt
+  namespace: squadquest-supabase
+type: Opaque
diff --git a/squadquest-supabase/Secret/squadquest-supabase-smtp.yaml b/squadquest-supabase/Secret/squadquest-supabase-smtp.yaml
new file mode 100644
index 0000000..584794a
--- /dev/null
+++ b/squadquest-supabase/Secret/squadquest-supabase-smtp.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+data: null
+kind: Secret
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-smtp
+  namespace: squadquest-supabase
+type: Opaque
diff --git a/squadquest-supabase/Service/squadquest-supabase-supabase-analytics.yaml b/squadquest-supabase/Service/squadquest-supabase-supabase-analytics.yaml
new file mode 100644
index 0000000..f8bce61
--- /dev/null
+++ b/squadquest-supabase/Service/squadquest-supabase-supabase-analytics.yaml
@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-analytics
+  namespace: squadquest-supabase
+spec:
+  ports:
+    - name: http
+      port: 4000
+      protocol: TCP
+      targetPort: 4000
+  selector:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/name: supabase-analytics
+  type: ClusterIP
diff --git a/squadquest-supabase/Service/squadquest-supabase-supabase-auth.yaml b/squadquest-supabase/Service/squadquest-supabase-supabase-auth.yaml
new file mode 100644
index 0000000..6cd1b2a
--- /dev/null
+++ b/squadquest-supabase/Service/squadquest-supabase-supabase-auth.yaml
@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-auth
+  namespace: squadquest-supabase
+spec:
+  ports:
+    - name: http
+      port: 9999
+      protocol: TCP
+      targetPort: 9999
+  selector:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/name: supabase-auth
+  type: ClusterIP
diff --git a/squadquest-supabase/Service/squadquest-supabase-supabase-db.yaml b/squadquest-supabase/Service/squadquest-supabase-supabase-db.yaml
new file mode 100644
index 0000000..083cac3
--- /dev/null
+++ b/squadquest-supabase/Service/squadquest-supabase-supabase-db.yaml
@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-db
+  namespace: squadquest-supabase
+spec:
+  ports:
+    - name: http
+      port: 5432
+      protocol: TCP
+      targetPort: 5432
+  selector:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/name: supabase-db
+  type: ClusterIP
diff --git a/squadquest-supabase/Service/squadquest-supabase-supabase-functions.yaml b/squadquest-supabase/Service/squadquest-supabase-supabase-functions.yaml
new file mode 100644
index 0000000..c5c7cd7
--- /dev/null
+++ b/squadquest-supabase/Service/squadquest-supabase-supabase-functions.yaml
@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-functions
+  namespace: squadquest-supabase
+spec:
+  ports:
+    - name: http
+      port: 9000
+      protocol: TCP
+      targetPort: 9000
+  selector:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/name: supabase-functions
+  type: ClusterIP
diff --git a/squadquest-supabase/Service/squadquest-supabase-supabase-imgproxy.yaml b/squadquest-supabase/Service/squadquest-supabase-supabase-imgproxy.yaml
new file mode 100644
index 0000000..830f47f
--- /dev/null
+++ b/squadquest-supabase/Service/squadquest-supabase-supabase-imgproxy.yaml
@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-imgproxy
+  namespace: squadquest-supabase
+spec:
+  ports:
+    - name: http
+      port: 5001
+      protocol: TCP
+      targetPort: 5001
+  selector:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/name: supabase-imgproxy
+  type: ClusterIP
diff --git a/squadquest-supabase/Service/squadquest-supabase-supabase-kong.yaml b/squadquest-supabase/Service/squadquest-supabase-supabase-kong.yaml
new file mode 100644
index 0000000..29f6bfa
--- /dev/null
+++ b/squadquest-supabase/Service/squadquest-supabase-supabase-kong.yaml
@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-kong
+  namespace: squadquest-supabase
+spec:
+  ports:
+    - name: http
+      port: 8000
+      protocol: TCP
+      targetPort: 8000
+  selector:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/name: supabase-kong
+  type: ClusterIP
diff --git a/squadquest-supabase/Service/squadquest-supabase-supabase-meta.yaml b/squadquest-supabase/Service/squadquest-supabase-supabase-meta.yaml
new file mode 100644
index 0000000..db975b7
--- /dev/null
+++ b/squadquest-supabase/Service/squadquest-supabase-supabase-meta.yaml
@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-meta
+  namespace: squadquest-supabase
+spec:
+  ports:
+    - name: http
+      port: 8080
+      protocol: TCP
+      targetPort: 8080
+  selector:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/name: supabase-meta
+  type: ClusterIP
diff --git a/squadquest-supabase/Service/squadquest-supabase-supabase-realtime.yaml b/squadquest-supabase/Service/squadquest-supabase-supabase-realtime.yaml
new file mode 100644
index 0000000..6ec9e52
--- /dev/null
+++ b/squadquest-supabase/Service/squadquest-supabase-supabase-realtime.yaml
@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-realtime
+  namespace: squadquest-supabase
+spec:
+  ports:
+    - name: http
+      port: 4000
+      protocol: TCP
+      targetPort: 4000
+  selector:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/name: supabase-realtime
+  type: ClusterIP
diff --git a/squadquest-supabase/Service/squadquest-supabase-supabase-rest.yaml b/squadquest-supabase/Service/squadquest-supabase-supabase-rest.yaml
new file mode 100644
index 0000000..201c80f
--- /dev/null
+++ b/squadquest-supabase/Service/squadquest-supabase-supabase-rest.yaml
@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-rest
+  namespace: squadquest-supabase
+spec:
+  ports:
+    - name: http
+      port: 3000
+      protocol: TCP
+      targetPort: 3000
+  selector:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/name: supabase-rest
+  type: ClusterIP
diff --git a/squadquest-supabase/Service/squadquest-supabase-supabase-storage.yaml b/squadquest-supabase/Service/squadquest-supabase-supabase-storage.yaml
new file mode 100644
index 0000000..e07b369
--- /dev/null
+++ b/squadquest-supabase/Service/squadquest-supabase-supabase-storage.yaml
@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-storage
+  namespace: squadquest-supabase
+spec:
+  ports:
+    - name: http
+      port: 5000
+      protocol: TCP
+      targetPort: 5000
+  selector:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/name: supabase-storage
+  type: ClusterIP
diff --git a/squadquest-supabase/Service/squadquest-supabase-supabase-studio.yaml b/squadquest-supabase/Service/squadquest-supabase-supabase-studio.yaml
new file mode 100644
index 0000000..a42e5d9
--- /dev/null
+++ b/squadquest-supabase/Service/squadquest-supabase-supabase-studio.yaml
@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-studio
+  namespace: squadquest-supabase
+spec:
+  ports:
+    - name: http
+      port: 3000
+      protocol: TCP
+      targetPort: 3000
+  selector:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/name: supabase-studio
+  type: ClusterIP
diff --git a/squadquest-supabase/Service/squadquest-supabase-supabase-vector.yaml b/squadquest-supabase/Service/squadquest-supabase-supabase-vector.yaml
new file mode 100644
index 0000000..a431619
--- /dev/null
+++ b/squadquest-supabase/Service/squadquest-supabase-supabase-vector.yaml
@@ -0,0 +1,20 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-vector
+  namespace: squadquest-supabase
+spec:
+  ports:
+    - name: http
+      port: 9001
+      protocol: TCP
+      targetPort: 9001
+  selector:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/name: supabase-vector
+  type: ClusterIP
diff --git a/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-analytics.yaml b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-analytics.yaml
new file mode 100644
index 0000000..9e2681a
--- /dev/null
+++ b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-analytics.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-analytics
+  namespace: squadquest-supabase
diff --git a/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-auth.yaml b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-auth.yaml
new file mode 100644
index 0000000..37ee1cf
--- /dev/null
+++ b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-auth.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-auth
+  namespace: squadquest-supabase
diff --git a/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-db.yaml b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-db.yaml
new file mode 100644
index 0000000..983c4da
--- /dev/null
+++ b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-db.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-db
+  namespace: squadquest-supabase
diff --git a/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-functions.yaml b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-functions.yaml
new file mode 100644
index 0000000..c2e60a7
--- /dev/null
+++ b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-functions.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-functions
+  namespace: squadquest-supabase
diff --git a/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-imgproxy.yaml b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-imgproxy.yaml
new file mode 100644
index 0000000..fd1d074
--- /dev/null
+++ b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-imgproxy.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-imgproxy
+  namespace: squadquest-supabase
diff --git a/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-kong.yaml b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-kong.yaml
new file mode 100644
index 0000000..1b89f1e
--- /dev/null
+++ b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-kong.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-kong
+  namespace: squadquest-supabase
diff --git a/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-meta.yaml b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-meta.yaml
new file mode 100644
index 0000000..e22339d
--- /dev/null
+++ b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-meta.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-meta
+  namespace: squadquest-supabase
diff --git a/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-realtime.yaml b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-realtime.yaml
new file mode 100644
index 0000000..6ea1bfd
--- /dev/null
+++ b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-realtime.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-realtime
+  namespace: squadquest-supabase
diff --git a/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-rest.yaml b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-rest.yaml
new file mode 100644
index 0000000..3758b3a
--- /dev/null
+++ b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-rest.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-rest
+  namespace: squadquest-supabase
diff --git a/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-storage.yaml b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-storage.yaml
new file mode 100644
index 0000000..fc588df
--- /dev/null
+++ b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-storage.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-storage
+  namespace: squadquest-supabase
diff --git a/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-studio.yaml b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-studio.yaml
new file mode 100644
index 0000000..5a84c87
--- /dev/null
+++ b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-studio.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-studio
+  namespace: squadquest-supabase
diff --git a/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-vector.yaml b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-vector.yaml
new file mode 100644
index 0000000..e916335
--- /dev/null
+++ b/squadquest-supabase/ServiceAccount/squadquest-supabase-supabase-vector.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/instance: squadquest-supabase
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: supabase
+    helm.sh/chart: supabase-0.1.3
+  name: squadquest-supabase-supabase-vector
+  namespace: squadquest-supabase